Ivanti Connect Secure: Three Zero-Day Security Vulnerabilities Discovered

An attacker has exploited three zero-day security vulnerabilities in Ivanti Connect Secure, a VPN device, to gain root access without authentication. This was announced on October 13, 2026, by the security firm Volexity. The vulnerabilities allow attackers to execute commands with elevated privileges, posing significant security risks to affected systems. Ivanti has already released patches for two of the three identified vulnerabilities.

Affected customers have been urged to install the updates immediately to protect their systems. Volexity had previously reported the vulnerabilities to Ivanti, leading to a swift response from the company. The first vulnerability, classified as CVE-2026-1234, allows attackers to access the system through an unauthenticated interface. The second vulnerability, CVE-2026-5678, concerns the processing of requests and can also lead to unauthorized access. Both patches have been available since October 12, 2026.

The third vulnerability, which has not yet been patched, remains a potential target for attackers. Volexity has informed Ivanti that this vulnerability is also critical and needs urgent remediation. The exact designation of this vulnerability has not yet been disclosed by Volexity. The security vulnerabilities in Ivanti Connect Secure affect a wide range of companies that rely on this VPN solution to ensure secure connections for their employees.

The use of VPNs has increased in recent years, particularly since the COVID-19 pandemic, highlighting the importance of securing such systems. Volexity recommends that all users of Ivanti Connect Secure update their systems immediately and take additional security measures to prevent potential attacks. This includes monitoring network activities and implementing intrusion detection systems. The discovery of these vulnerabilities has also drawn the attention of security authorities. Experts warn that inadequate security measures in companies can lead to significant data loss and financial damage.

Incidents underscore the necessity of regularly reviewing and updating security protocols. Ivanti has emphasized in a statement that customer security is a top priority and that the company is continuously working to improve its products. The release of patches for the first two vulnerabilities is part of these efforts. The vulnerabilities in Ivanti Connect Secure are not the first to be discovered in the industry. In recent years, there have been several incidents pointing to weaknesses in VPN technologies.

Companies are therefore challenged to rethink and potentially adjust their security strategies. Volexity discovered the vulnerabilities as part of its ongoing threat monitoring. The discovery and reporting of such vulnerabilities are crucial for ensuring the security of IT systems. Volexity has previously identified several critical vulnerabilities in various software solutions. The affected versions of Ivanti Connect Secure are currently unspecified; however, it is recommended that all users install the latest updates to protect against potential attacks.

Ivanti plans to release details about the third vulnerability in the near future. The vulnerabilities have been classified as critical, meaning they could potentially have far-reaching impacts on network security. Companies should therefore take immediate action to secure their systems. According to Volexity, the vulnerability CVE-2026-1234 affects a wide range of users worldwide, underscoring the urgency of the situation.